Cybersecurity and Infrastructure Security Agency CISA

History

2024: Lisa Einstein's appointment as first AI director

In early August 2024, the U.S. Cybersecurity and Infrastructure Protection Agency (CISA) announced the appointment of its first director of artificial intelligence. These duties are assigned to Lisa Einstein, who previously served as executive director of the agency's Cybersecurity Advisory Committee and senior CISA adviser on AI. Read more here.

2022: Opening of the first office abroad

In mid-July 2022, the US Cybersecurity and Infrastructure Protection Agency (CISA) reported on the opening of its first foreign office - in London. Thus, the department will expand work with allies and international partners. It is noted that the branch will serve as an effective model for the development of an international mission to reduce risks in the field of cybersecurity.

The CISA branch London in will partner with the National Cyber ​ ​ Security Center, Great Britain which is dedicated to combating online threats, as well as providing expertise and advice to enterprises and government departments.

US cybersecurity agency announces opening of foreign office

CISA was founded USA in November 2018 and is led by veteran U.S. National Security Council, military and intelligence communities Jen Easterly from 2021 to July 2022. Easterley was appointed after former President Trump fired former director Chris Krebs over a public disagreement with the president.

An attaché office will now be set up in London to serve as a focal point for international cooperation between CISA, UK government officials and officials from other federal agencies. The department said the UK office would facilitate CISA missions in cybersecurity, critical infrastructure protection and emergency communications, and use the agency's global network to advance CISA's four international strategic goals:

• Development of operational cooperation;
• Partner Capacity Building;
• Strengthening cooperation through stakeholder engagement and advocacy;
• Shaping the global policy ecosystem.

Of course, you need 24-hour and constant cyber intelligence - and I don't mean the endless alerts that the security team has to review. But highly qualified experts who will actively analyze and see real threats behind data. Increased cooperation between the US and UK, led by CISA, will significantly improve the digital world in which many businesses and citizens interact, said Ian McShane, vice president of strategy at Arctic Wolf.

CISA's first British attaché was Julie Johnson, who previously served as CISA's regional security adviser in New York, where she led research into microgrid, communications and the internet, and the convergence of physical and cyberspace. Johnson also served as CISA's regional leader in federal interagency working groups. Prior to working at CISA, Johnson worked for the U.S. Department of State's Bureau of Intelligence and Research, the Bureau of Narcotics and Law Enforcement, and the Bureau of Education and Culture, where she handled citizen exchange, Fulbright Scholarship, IT center deployments, and international training.^[1]

2020: US President Donald Trump fires agency director Chris Krebs

In November 2020, US President Donald Trump fired Chris Krebs, director of the US Cybersecurity and Infrastructure Security Agency (CISA), because Krebs officially assured the public of the security of the US elections that these were indeed free and fair elections.

"Chris Krebs' statement on the security of the 2020 election was extremely erroneous, there is numerous evidence of massive violations and fraud, including the vote of" dead souls. "

Observers were not allowed to polling stations, there were violations in the operation of voting machines that changed votes from Trump to Biden, late voting and much more. Therefore, from today, Chris Krebs has been fired as director of the Cybersecurity and Infrastructure Security Agency. "

2019: Claim of right to receive subscriber data from ISPs

On October 10, 2019, it became known that the division cyber security U.S. Department of Homeland Security requires amendments to the current legislation that would give it the right to request from Internet-, providers information which allows identifying users of vulnerable systems.

CISA, whose responsibilities include alerting government and commercial organizations to vulnerabilities, complains about the lack of the ability to notify commercial companies of security problems, since it is not always possible to identify the owner of a problem system. Such powers would allow CISA to alert directly owners of vulnerable critical devices (such as industrial control systems) to threats.

Under current U.S. law, ISPs must provide access to subscriber data only if there is a warrant that can be issued by a federal body even without a court order. CISA does not have the right to issue data orders and therefore is forced to apply for them to partner federal bodies. However, there is also a catch here, since federal authorities can only request data if a criminal investigation is carried out. The problem is that CISA should alert owners of vulnerable systems, regardless of whether^[2] is investigating^[3].

2018: Creation of a cybersecurity agency

In November 2018, US President Donald Trump approved a bill to create a new cybersecurity division, called the Cybersecurity and Infrastructure Security Agency (CISA).

According to ZDNet, this bill, known as the CISA Act, provides for the reorganization and rebranding of the National Protection and Programs Directorate (NPPD) initiative within the Ministry of National Security. CISA has become a stand-alone federal agency overseeing civil and federal cybersecurity programs.

Trump signs bill creating new federal cybersecurity agency

The NPPD structure, created in 2007, was engaged in the management of almost all issues and projects related to cybersecurity that the Ministry of National Security had.

The NPPD was the government body responsible for the physical and cybersecurity of federal networks and critical infrastructure. The structure oversaw the Federal Protection Service (FPS), the Department of Biometric Identification Management (OBIM), the Office of Cyber Defense and Infrastructure Analysis (OCIA), the Office of Cybersecurity and Communications (OC&C), and the Office of Infrastructure Protection (OIP).^[4]

CISA received the status of an official agency of federal cybersecurity in the United States, so it will be able to use funds from the federal budget and will receive expanded powers in terms of lobbying for its directives.

The landscape of cyber threats is constantly evolving, and we must be confident in the right alignment of our forces to protect American infrastructure from digital and physical threats. It's time to reorganize the NPPD and put in place the Cybersecurity and Infrastructure Security Agency, "said U.S. Homeland Security Secretary Kirstjen Nielsen.

Notes